OSEC-2026-14 RSA signature verification raises undocumented exception

The RSA decrypt and encrypt functions raise an Invalidargument exception if the message is smaller than 2. This leads to X509 certificates with a signature value of 0 or 1 to throw this Invalidargument exception instead of a proper error. Fix The fix is to reuse the Insufficientkey exception, whi...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=4790812572188672 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

CVE-2026-56818: Missing Release of Memory after Effective Lifetime

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...

CVE-2026-45204: NULL Pointer Dereference

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions,...

PT-2026-76731

The internal Point.of octets function is missing a length check for compressed points, and thus is raising an exception when a short buffer is provided. This affects all NIST curves P-256, P-384, P-521 and both Dsa.pub of octets and Dh.key exchange functions. Fix The fix is to check the length of...

PT-2026-76730

The RSA decrypt and encrypt functions raise an Invalid argument exception if the message is smaller than 2. This leads to X509 certificates with a signature value of 0 or 1 to throw this Invalid argument exception instead of a proper error. Fix The fix is to reuse the Insufficient key exception,...

MAL-2026-13480 Malicious code in @prototypevip/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b0068015e90b8e47dd9b67c66ed1d0b0cc4c1ebccd985f08efd31837d27ce8 @prototypevip/baileys is a fork of the Baileys WhatsApp library. lib/Store/prototype-store.js registers a listener on the 'messages.upsert' event tha...

CVE-2026-71430

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function built its replacement result and passed it to V8 using ToLocalChecked without checking for the empty MaybeLocal that V8 returns when the resulting string or buffer exceeds V8's...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4581756850995200 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

CVE-2026-64592

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Unconditionally sfence.vma for spurious fault Svvptc does not guarantee that it's safe to just return here. Since we have already cleared our bit, if, theoretically, the bounded timeframe for the accessed page to becom...

MAL-2026-12654 Malicious code in cobrowsing-exception-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715fc9a652bf5d69755ea21ef2a906c318c511fe433df0721a13e266c3646832 On require of cobrowsing-exception-filter, index.js unconditionally loads support.js, which selects a platform-specific endpoint from a hardcoded lis...

openSUSE 16 Security Update : python-ujson (openSUSE-SU-2026:21518-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21518-1 advisory. This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in...

CVE-2026-61387

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

Security update for python-ujson (important)

openSUSE security update: security update for python-ujson ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21518-1 Rating: important References: bsc1270301 Cross-References: CVE-2026-44660 CVSS scores: CVE-2026-44660 SUSE : 7.5...

Sensitive Information Exposure

Spring Data REST is vulnerable to Sensitive Information Exposure. The vulnerability is due to serialization of the full exception cause chain in HTTP error responses, allowing attackers to obtain persistence-layer implementation details and other internal application information through error...

SUSE-SU-2026:23114-1 Security update for python-ujson

This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump can lead to memory leaks bsc1270301...

OPENSUSE-SU-2026:21518-1 Security update for python-ujson

This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump can lead to memory leaks bsc1270301...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6283880190246912 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=6092688160784384 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

OSV-2026-1101 Security exception in com.google.re2j.Machine$Queue.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540908715 Crash type: Security exception Crash state: com.google.re2j.Machine$Queue. com.google.re2j.Machine. com.google.re2j.RE2.doExecute...